$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft File: MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json) Hash identifier: RtVHPFyIQXfWiNYHXIEDXsLv4y89yu5vqXDAEdXwaGk= Subject key identifier: 0E:B6:93:97:E0:42:B1:63:D1:56:3E:DD:4C:AA:43:EC:2C:8A:C8:97 Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D Certificate issuer: /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Certificate serial: 04EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft Manifest number: 04E8 Signing time: Tue 04 Nov 2025 23:50:39 +0000 Manifest this update: Tue 04 Nov 2025 23:50:39 +0000 Manifest next update: Tue 11 Nov 2025 23:50:39 +0000 Files and hashes: 1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: zr6qgpnOy6IFzn8hC19AFcfe732nWnpon2VzIgnA73o=) 2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: O5o2WM89g2GajktjirO4l7am93YdomSAoRe9/bA2z6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Validity Not Before: Nov 4 23:50:39 2025 GMT Not After : Nov 11 23:50:39 2025 GMT Subject: CN=690a914f-be45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:a1:f7:6f:be:aa:19:3d:a1:cc:f7:57:25: f1:1f:c1:c2:06:c7:a6:c3:99:c3:28:3a:66:d2:65: f9:4f:44:b5:c9:c8:74:31:0f:7a:d6:11:b2:b1:d7: 01:75:38:3d:a0:b8:40:8f:c7:ac:e1:f7:3a:38:3f: 79:e6:ab:39:51:5a:00:47:86:fe:d5:e7:7c:15:47: a5:af:7f:e9:57:03:af:cb:32:9c:df:9c:e5:40:94: d6:21:af:ed:d4:4a:23:89:39:34:3b:65:9d:9a:9c: c8:81:d8:ee:32:0a:cd:dc:ad:ff:4c:00:4c:21:87: b7:b9:95:05:0a:51:69:a4:40:55:53:8e:0c:6e:0f: 3b:bf:21:ab:9e:c8:91:8f:10:0c:d3:81:00:d5:02: e8:95:db:3d:bd:6f:e5:a2:9d:40:74:0a:e4:0d:e5: 7d:90:53:46:57:1a:86:3a:55:98:d7:2d:ad:45:bd: b5:1e:5a:16:d2:97:2d:f5:84:51:05:6b:3a:9c:76: c4:3d:3a:f4:f7:5d:19:16:52:04:38:37:27:df:76: ab:eb:ea:7f:b0:8e:c1:2b:4c:8c:df:44:2c:eb:4c: 87:64:22:63:b1:05:5a:b9:11:b8:0a:e9:d4:12:77: 67:64:0f:cc:20:d2:24:e7:21:c5:5d:20:d9:c5:04: 83:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B6:93:97:E0:42:B1:63:D1:56:3E:DD:4C:AA:43:EC:2C:8A:C8:97 X509v3 Authority Key Identifier: keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:9a:15:29:25:0e:df:ce:6a:0e:5b:67:99:30:96:be:6c:35: 05:6e:a0:b1:60:dd:77:48:3d:a8:b1:50:22:10:c4:f3:72:71: 36:a4:6d:db:3a:86:3b:82:e0:17:8a:62:14:1c:d8:e8:07:c8: 0d:aa:dd:94:9d:d5:5d:c7:be:42:10:ae:8b:97:60:6e:08:d7: b3:09:b5:af:d5:5f:5c:a3:fa:6d:67:38:5f:f0:1d:c6:e2:cc: 8f:ed:2c:a3:55:63:8a:2e:af:f9:b8:78:9c:32:26:1e:c7:67: 92:69:ab:5b:65:19:45:51:dd:9f:bc:07:60:a4:90:51:b5:9a: ac:7a:e4:34:b7:13:cc:0a:55:a6:33:c1:5c:c6:7c:de:d6:46: c7:38:96:f7:28:e0:b9:7f:62:a2:bf:6a:23:a2:15:82:c7:20: f5:04:d2:79:6c:97:b4:e1:93:21:1b:03:c5:10:0f:2b:b5:6a: 87:ac:bb:ea:17:b0:32:06:bf:2d:30:7d:a0:ad:1b:40:42:6a: 2f:28:11:93:c8:c8:fd:c9:58:ad:f9:53:25:bd:6f:4c:cd:ce: 68:1c:dd:ad:62:20:09:8c:d5:a3:84:be:f7:73:6a:1a:88:d5: 83:26:81:af:a2:4a:3a:d1:09:aa:44:f7:8e:24:3f:aa:40:0b: 5d:50:20:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzNzExMTAvBgNVBAUTKDMyRjg5MDBEMzg1NkJFNDNBNzJENkM3RjkzRTkwNEI1 QjgzQ0MzNEQwHhcNMjUxMTA0MjM1MDM5WhcNMjUxMTExMjM1MDM5WjAYMRYwFAYD VQQDEw02OTBhOTE0Zi1iZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E2h92++qhk9ocz3VyXxH8HCBsemw5nDKDpm0mX5T0S1ych0MQ961hGysdcB dTg9oLhAj8es4fc6OD955qs5UVoAR4b+1ed8FUelr3/pVwOvyzKc35zlQJTWIa/t 1EojiTk0O2WdmpzIgdjuMgrN3K3/TABMIYe3uZUFClFppEBVU44Mbg87vyGrnsiR jxAM04EA1QLolds9vW/lop1AdArkDeV9kFNGVxqGOlWY1y2tRb21HloW0pct9YRR BWs6nHbEPTr0910ZFlIEODcn33ar6+p/sI7BK0yM30Qs60yHZCJjsQVauRG4CunU EndnZA/MINIk5yHFXSDZxQSD9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA62k5fg QrFj0VY+3UyqQ+wsisiXMB8GA1UdIwQYMBaAFDL4kA04Vr5Dpy1sf5PpBLW4PMNN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTM3MS8zNkZFRTdFQTM4 QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3ZrT25MV3hfay1rRXRiZzh3 MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012aVFEVGhXdmtPbkxXeF9rLWtFdGJnOHcwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTM3MS8zNkZFRTdFQTM4QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3Zr T25MV3hfay1rRXRiZzh3MDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4mhUpJQ7fzmoOW2eZMJa+bDUFbqCxYN13SD2osVAiEMTzcnE2pG3b OoY7guAXimIUHNjoB8gNqt2UndVdx75CEK6Ll2BuCNezCbWv1V9co/ptZzhf8B3G 4syP7SyjVWOKLq/5uHicMiYex2eSaatbZRlFUd2fvAdgpJBRtZqseuQ0txPMClWm M8Fcxnze1kbHOJb3KOC5f2Kiv2ojohWCxyD1BNJ5bJe04ZMhGwPFEA8rtWqHrLvq F7AyBr8tMH2grRtAQmovKBGTyMj9yVit+VMlvW9Mzc5oHN2tYiAJjNWjhL73c2oa iNWDJoGvoko60QmqRPeOJD+qQAtdUCD9 -----END CERTIFICATE-----Generated at Wed Nov 5 15:16:51 2025 by rpki-client